Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
File:                     OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json)
Hash identifier:          Yqj0ZZkZ0kxmA3d0ZR3sd4mtslF7rvxSBMHCq7AJMAA=
Subject key identifier:   7D:7B:FF:B9:F0:7C:F7:EA:5D:35:C8:2E:86:43:D8:68:99:F6:BA:01
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Certificate issuer:       /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial:       0194BCA9DD32C2F8A858B6D2523EA98522EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
Manifest number:          1169
Signing time:             Fri 31 Jan 2025 14:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:36 +0000
Files and hashes:         1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=)
                          2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=)
                          3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=)
                          4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: AT7tl/Omip4KlBxZoipDaKAyq57euAZJPLxmHbFUGQs=)
                          5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=)
                          6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=)
                          7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=)
                          8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=)
                          9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=)
                          10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:dd:32:c2:f8:a8:58:b6:d2:52:3e:a9:85:22:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
        Validity
            Not Before: Jan 31 14:00:36 2025 GMT
            Not After : Feb  1 14:00:36 2025 GMT
        Subject: CN=7d7bffb9f07cf7ea5d35c82e8643d86899f6ba01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:93:6a:1a:3f:3b:3d:f0:0c:04:ac:0c:14:
                    0c:54:28:9e:76:23:69:ad:a8:81:04:fa:c8:d8:ca:
                    a1:db:67:cc:13:86:11:a4:95:5c:76:3a:ae:96:b1:
                    80:96:57:60:34:51:af:4d:91:05:ec:49:ae:78:15:
                    60:c3:06:1a:1c:f9:05:9a:c5:0a:13:0d:c8:89:4b:
                    2c:e0:e0:2d:96:a4:e8:cb:6c:af:1e:48:8f:f9:87:
                    4c:6e:3d:96:ed:ac:ba:90:92:ae:5b:d7:13:25:cb:
                    26:ef:75:5c:76:f2:5e:21:ba:85:fd:0d:88:3d:fb:
                    9e:c2:90:1a:89:06:de:7f:7f:ba:00:9a:0e:49:a3:
                    a9:38:1c:7c:2a:25:a2:10:36:d2:db:66:7c:e7:21:
                    37:70:2b:78:37:7a:31:70:b9:e6:22:b9:14:0e:0b:
                    6d:05:ae:2d:29:8f:b6:b8:f2:bc:cf:cb:08:a1:47:
                    6a:7f:cb:bb:88:00:0b:6f:53:ba:ce:6d:da:25:52:
                    c8:88:de:80:2f:e3:e1:92:85:4b:65:b5:e6:14:0b:
                    fe:fe:ac:c8:cd:bf:84:85:fd:00:f5:60:57:42:7c:
                    c2:6d:d9:fa:e0:cb:2f:c9:d6:df:dd:05:f5:ba:f0:
                    a9:48:15:19:2b:ce:d0:2f:9a:61:6b:c9:66:ab:79:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7B:FF:B9:F0:7C:F7:EA:5D:35:C8:2E:86:43:D8:68:99:F6:BA:01
            X509v3 Authority Key Identifier:
                keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:fe:41:bc:19:25:2e:51:02:c8:f3:a7:50:f9:fb:77:b6:
         5f:a9:47:6a:71:b7:d5:df:dc:91:68:48:c7:5f:5a:53:df:f6:
         77:37:9b:5b:fa:80:27:0d:2e:36:d6:47:99:38:d7:12:6a:75:
         b4:b9:c5:ea:4b:28:a4:7e:96:db:e5:c7:c0:45:46:7e:98:a2:
         1e:d2:b9:d3:6a:d1:0d:2e:8d:51:a0:f1:c7:d1:74:be:d1:26:
         87:84:ac:2d:6a:53:86:11:79:99:e8:37:84:73:cb:5a:1e:99:
         1e:ad:38:34:f9:4c:1b:93:01:ba:63:9c:f6:80:36:30:a9:5e:
         f9:7a:e3:c5:ce:f0:6c:1d:82:72:9b:3e:41:87:45:cf:45:07:
         9e:d0:39:cd:93:ff:d8:01:b3:8d:ea:cb:84:f9:5c:cc:b8:2f:
         65:f0:ea:7c:31:53:08:8b:c2:85:90:29:cb:5d:05:37:00:72:
         5d:12:91:88:52:ce:95:ba:eb:e8:53:db:e6:9d:c6:fe:2b:7a:
         ff:36:4d:9a:ba:ca:ba:69:63:11:b8:ab:82:8b:b1:14:6d:fe:
         76:e2:3f:5a:da:6e:95:d0:60:34:70:b5:2b:c1:09:f4:95:7a:
         16:8f:df:c5:d0:5e:46:b8:33:ba:34:93:f5:5a:50:62:9f:c9:
         c2:fa:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----